$ rpki-client -vvf rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft File: 412965964A4E12BD59BDF602A054F3394E99DC57.mft (raw, json) Hash identifier: iEEwbgEA8S5Of0JlL3Ce/DrBZ6k6ZVgXkIn/IrWxXeg= Subject key identifier: D5:EB:56:98:C3:72:BF:61:F2:92:BB:F3:7E:C5:9A:28:F9:91:A7:98 Authority key identifier: 41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 Certificate issuer: /CN=412965964A4E12BD59BDF602A054F3394E99DC57 Certificate serial: 3AD2734DD16C410C372A91DF7E98235E5A58EB44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 18:29:41 +0000 Manifest this update: Tue 28 Jul 2026 18:24:41 +0000 Manifest next update: Wed 29 Jul 2026 22:26:41 +0000 Files and hashes: 1: 3130332e31382e3131372e302f32342d3234203d3e20313332363334.roa (hash: TwoAdTsM3NEVv7qQwQrrGzyUs0c/Mt2dxvgYNM1lek8=) 2: 3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (hash: uLq3gfPOGWF6ZWj1F9WMmGzvCujMeECGwqgAQGV2Nv4=) 3: 3130332e3232352e3234322e302f32342d3234203d3e20313332363334.roa (hash: SenSDJoyF/7+T+Cte5ij0s1hRLf2P72+k6wabdM015Q=) 4: 3130332e362e33342e302f32342d3234203d3e20313332363334.roa (hash: s2Tpgag7FxdnRddbkWVhsKOC3K9zk4kizsUSEDbaWVQ=) 5: 412965964A4E12BD59BDF602A054F3394E99DC57.crl (hash: jBb9YQYkUgEI1IhvfZkn8lwAC6dvshp22W/mWiG9AXQ=) 6: 3130332e382e3233382e302f32342d3234203d3e20313332363334.roa (hash: PR4TqG8Gt/NDoejWkXR5KiYWrPCc3WE35fh/Jxbvano=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d2:73:4d:d1:6c:41:0c:37:2a:91:df:7e:98:23:5e:5a:58:eb:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=412965964A4E12BD59BDF602A054F3394E99DC57 Validity Not Before: Jul 28 18:24:41 2026 GMT Not After : Jul 29 22:26:41 2026 GMT Subject: CN=D5EB5698C372BF61F292BBF37EC59A28F991A798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:87:03:22:02:8a:2f:86:d2:4e:9f:71:d9:1a: c5:03:5d:0e:31:36:e0:e5:6f:85:5c:e4:24:6f:15: a0:28:33:32:d3:fe:2d:eb:8c:43:68:55:fd:df:25: 94:31:77:e3:fb:79:ae:d7:a8:c1:90:08:95:c4:5f: 0f:06:70:d4:3f:78:8e:96:24:16:11:83:18:4f:a4: 57:06:a8:de:d7:c5:ef:8e:e1:3b:9a:cc:f7:ae:81: 79:3f:d1:c8:e6:2d:58:93:0d:e7:90:5f:b6:ff:db: 8f:6a:a5:e8:c0:1d:a7:36:4c:6f:01:a1:ae:6a:a0: ce:58:4c:4e:c6:ed:5c:48:7d:f9:91:b7:90:f8:04: e2:8e:20:bf:be:1f:d4:20:b6:8b:25:76:62:ea:49: f9:6b:27:4e:85:d4:9e:59:66:b1:7d:4b:ee:87:52: d0:c4:ca:f1:96:e6:18:fd:28:90:bc:2d:c4:f4:53: f4:88:24:17:a3:ad:f4:fc:69:d2:cd:7f:dd:02:0d: 4d:1a:61:7a:f7:74:c1:12:3f:11:aa:9b:98:41:1e: 17:03:ca:b6:c5:00:cc:22:85:7f:e0:2c:7b:ed:11: 9e:53:b6:33:2e:29:70:7b:ab:a9:58:8d:e6:00:53: 38:58:cd:88:fd:8e:0e:18:01:45:1c:37:d7:47:83: 58:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:EB:56:98:C3:72:BF:61:F2:92:BB:F3:7E:C5:9A:28:F9:91:A7:98 X509v3 Authority Key Identifier: keyid:41:29:65:96:4A:4E:12:BD:59:BD:F6:02:A0:54:F3:39:4E:99:DC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/412965964A4E12BD59BDF602A054F3394E99DC57.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/412965964A4E12BD59BDF602A054F3394E99DC57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:41:7b:33:a9:84:ad:6f:97:8c:31:ff:3a:99:9c:d5:63:f0: 50:38:ce:6e:25:fa:a2:0a:68:14:66:82:1b:92:06:41:c8:60: 2f:14:38:13:3f:f1:14:67:b4:f5:92:88:fc:5b:02:74:a8:f9: ea:a4:d8:1f:bc:da:b5:d1:94:16:45:77:91:94:0d:28:60:08: ca:2c:98:8b:1a:6a:d7:85:a7:0f:0b:bd:36:1c:3d:90:8b:09: 28:c3:28:66:70:86:f9:2a:ce:fe:e9:14:cc:5b:9e:f2:e3:b3: ae:2b:cf:85:13:99:69:13:7d:0d:76:86:0c:34:1b:9d:d4:45: ab:fe:18:1a:40:76:ec:7a:1d:88:cd:22:9c:25:a0:da:7d:c5: 4a:f6:fa:51:f0:0a:3f:94:17:cb:a3:48:c4:49:4f:ab:43:3d: f7:9d:04:f9:f6:03:35:9e:61:c6:ff:aa:71:81:55:ee:eb:f1: 40:d4:2a:ba:1b:fa:c7:86:e9:8f:13:0f:dd:74:f5:d8:77:7c: 00:d9:e7:7d:52:6f:ea:5d:34:bd:cc:34:b9:2d:4f:8e:5f:b9: c6:96:77:a7:31:ed:2e:03:91:f9:16:df:a4:df:27:bf:0d:5b: 92:42:2e:d8:d2:4b:57:52:cf:57:d8:79:31:c8:15:d4:42:97: 3c:bf:e8:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtJzTdFsQQw3KpHffpgjXlpY60QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0 RTk5REM1NzAeFw0yNjA3MjgxODI0NDFaFw0yNjA3MjkyMjI2NDFaMDMxMTAvBgNV BAMTKEQ1RUI1Njk4QzM3MkJGNjFGMjkyQkJGMzdFQzU5QTI4Rjk5MUE3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhwMiAoovhtJOn3HZGsUDXQ4x NuDlb4Vc5CRvFaAoMzLT/i3rjENoVf3fJZQxd+P7ea7XqMGQCJXEXw8GcNQ/eI6W JBYRgxhPpFcGqN7Xxe+O4TuazPeugXk/0cjmLViTDeeQX7b/249qpejAHac2TG8B oa5qoM5YTE7G7VxIffmRt5D4BOKOIL++H9QgtosldmLqSflrJ06F1J5ZZrF9S+6H UtDEyvGW5hj9KJC8LcT0U/SIJBejrfT8adLNf90CDU0aYXr3dMESPxGqm5hBHhcD yrbFAMwihX/gLHvtEZ5TtjMuKXB7q6lYjeYAUzhYzYj9jg4YAUUcN9dHg1hfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1etWmMNyv2HykrvzfsWaKPmRp5gwHwYDVR0j BBgwFoAUQSlllkpOEr1ZvfYCoFTzOU6Z3FcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjBmN2JlMDYtOTY3Mi00NjQxLTk3YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0 QTRFMTJCRDU5QkRGNjAyQTA1NEYzMzk0RTk5REM1Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MTI5NjU5NjRBNEUxMkJENTlCREY2MDJBMDU0RjMzOTRFOTlE QzU3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjBmN2JlMDYtOTY3Mi00NjQxLTk3 YmQtOWJmZGY5NTVkZTE3LzAvNDEyOTY1OTY0QTRFMTJCRDU5QkRGNjAyQTA1NEYz Mzk0RTk5REM1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlBezOphK1vl4wx/zqZnNVj8FA4zm4l+qIK aBRmghuSBkHIYC8UOBM/8RRntPWSiPxbAnSo+eqk2B+82rXRlBZFd5GUDShgCMos mIsaateFpw8LvTYcPZCLCSjDKGZwhvkqzv7pFMxbnvLjs64rz4UTmWkTfQ12hgw0 G53URav+GBpAdux6HYjNIpwloNp9xUr2+lHwCj+UF8ujSMRJT6tDPfedBPn2AzWe Ycb/qnGBVe7r8UDUKrob+seG6Y8TD9109dh3fADZ531Sb+pdNL3MNLktT45fucaW d6cx7S4DkfkW36TfJ78NW5JCLtjSS1dSz1fYeTHIFdRClzy/6BU= -----END CERTIFICATE-----Generated at Wed Jul 29 12:26:54 2026 by rpki-client